Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/xTf5pi1O1OBOL8Roy41K3aIww6Y.roa
File: xTf5pi1O1OBOL8Roy41K3aIww6Y.roa (raw, json)
Hash identifier: S2VqtYqj28mSbHWyl9+CNpKvGeC5wqTzL6SGHQbpvl4=
Subject key identifier: C5:37:F9:A6:2D:4E:D4:E0:4E:2F:C4:68:CB:8D:4A:DD:A2:30:C3:A6
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 01966E76EF89BA1E1EC7818293980DA801E5
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/xTf5pi1O1OBOL8Roy41K3aIww6Y.roa
Signing time: Fri 25 Apr 2025 19:40:10 +0000
ROA not before: Fri 25 Apr 2025 19:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39582
IP address blocks: 37.77.0.0/19 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.13.0/24 maxlen: 24
37.77.14.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
2a02:4300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6e:76:ef:89:ba:1e:1e:c7:81:82:93:98:0d:a8:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Apr 25 19:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c537f9a62d4ed4e04e2fc468cb8d4adda230c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:51:69:47:5a:23:74:f2:53:bc:7d:73:c0:
87:79:e0:ce:5f:ca:d1:9c:9c:25:37:c5:7c:06:54:
c0:6a:ff:b1:92:0f:c4:61:d3:8b:9c:43:d1:bb:73:
1d:a8:99:4c:88:c8:cc:a1:c3:aa:65:ae:4b:d7:cd:
d0:c9:01:dc:ff:63:30:73:52:0d:33:62:f7:7b:69:
81:5c:bd:bd:8f:52:0c:8d:48:38:c1:2d:c4:5a:f4:
67:f9:8c:46:69:40:c9:a7:a6:3f:d6:f9:f0:e3:ea:
4f:e1:c8:5b:7d:05:86:2b:29:2f:91:47:db:8e:de:
a4:2b:6b:45:30:09:71:c7:e4:0e:48:5a:0d:d4:60:
8e:83:e4:a9:cc:39:73:9d:f8:ea:ad:4b:77:f9:ef:
96:4e:6a:c0:38:df:0f:ed:23:f2:98:a5:bc:68:08:
58:8b:43:75:f5:26:09:51:12:8b:45:8e:9d:b2:5c:
14:47:15:e7:e3:55:99:f3:f5:12:da:6e:dc:23:2c:
7d:06:93:29:5b:b5:34:30:c9:6d:16:c6:5d:01:6e:
f7:70:e7:94:fb:f5:5a:03:34:59:61:bb:e9:8f:5a:
62:5d:3c:60:64:3c:93:b9:fe:d5:a6:23:28:50:e2:
69:e6:01:57:e4:6b:92:1a:59:09:1b:1c:b8:97:d5:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:F9:A6:2D:4E:D4:E0:4E:2F:C4:68:CB:8D:4A:DD:A2:30:C3:A6
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/xTf5pi1O1OBOL8Roy41K3aIww6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
IPv6:
2a02:4300::/32
Signature Algorithm: sha256WithRSAEncryption
1d:b0:32:e7:11:26:14:bb:6d:ae:39:38:e4:0d:e9:0e:fa:01:
5a:1a:2f:bc:02:6f:7d:1e:56:f5:04:5a:84:05:d8:a2:76:e7:
39:02:d9:05:ea:9a:ec:94:c2:52:95:34:93:34:03:f9:dc:5e:
90:c4:3f:c0:39:73:96:6f:72:5c:10:cb:6c:f3:4d:e6:f4:98:
fb:e5:48:05:6a:cb:1c:93:92:8d:6f:f7:59:b6:5f:31:f5:57:
67:65:94:c3:49:98:52:5b:ef:13:65:26:99:b3:47:ba:05:7f:
e0:b5:3d:8d:7f:36:19:fd:ec:6f:6b:aa:fa:e3:e9:85:cd:9f:
0e:da:14:08:92:c1:96:27:a4:24:5b:4f:75:c5:91:21:f4:f2:
a0:66:75:1c:f1:bf:94:f0:96:b2:07:52:83:35:6a:7d:4b:90:
d4:be:2b:5e:6b:ad:ce:e0:4e:12:06:66:eb:81:04:33:02:63:
69:e7:fc:39:4e:f3:b4:3d:2a:12:33:c1:e5:ca:40:f4:d6:1d:
23:92:bc:a9:ff:00:64:5d:16:a3:2f:e7:50:9b:45:8f:94:e0:
e4:ff:67:2c:c9:0c:75:1c:08:f8:15:dc:d2:bc:a8:0e:00:3f:
63:92:d5:49:40:53:53:65:13:e3:6c:ee:66:9e:95:22:82:f1:
c2:32:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:14 2025 by rpki-client